Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2026-15467

Опубликовано: 10 авг. 2026
Источник: redhat
CVSS3: 8.1
EPSS Низкий

Описание

A flaw was found in the trustyai-service-operator's LMEvalJob controller. An authenticated user within the cluster can exploit this vulnerability by configuring a sidecar container to bypass existing security policies. This allows the user to enable and execute untrusted remote code, leading to arbitrary code execution within the cluster.

Отчет

Important: In Red Hat OpenShift AI, the LMEvalJob controller in trustyai-service-operator fails to filter protected environment variables in user-supplied sidecar containers. This allows any authenticated cluster user to bypass an admin-controlled security policy and enable remote code execution within these sidecar containers, leading to potential compromise of confidentiality and integrity.

Дополнительная информация

Статус:

Important
Дефект:
CWE-266
https://bugzilla.redhat.com/show_bug.cgi?id=2499086trustyai-service-operator: trustyai-service-operator: LMEvalJob sidecar containers bypass protected environment variable filtering, allowing TRUST_REMOTE_CODE policy override

EPSS

Процентиль: 31%
0.00381
Низкий

8.1 High

CVSS3

Связанные уязвимости

CVSS3: 8.1
nvd
7 дней назад

A flaw was found in the trustyai-service-operator's LMEvalJob controller. An authenticated user within the cluster can exploit this vulnerability by configuring a sidecar container to bypass existing security policies. This allows the user to enable and execute untrusted remote code, leading to arbitrary code execution within the cluster.

CVSS3: 8.1
github
7 дней назад

A flaw was found in the trustyai-service-operator's LMEvalJob controller. An authenticated user within the cluster can exploit this vulnerability by configuring a sidecar container to bypass existing security policies. This allows the user to enable and execute untrusted remote code, leading to arbitrary code execution within the cluster.

EPSS

Процентиль: 31%
0.00381
Низкий

8.1 High

CVSS3

Уязвимость CVE-2026-15467